Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-k5btyVmTEGJMFgNYFeYJNkpOY.roa
File: K-k5btyVmTEGJMFgNYFeYJNkpOY.roa (raw, json)
Hash identifier: B9bL91uFnCK78AoiBqTBrPSPujUtrtbN12WAO6bN6Sg=
Subject key identifier: 2B:E9:39:6E:DC:95:99:31:06:24:C1:60:35:81:5E:60:93:64:A4:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01930FEF0097AE93BB94690773A745E14176
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-k5btyVmTEGJMFgNYFeYJNkpOY.roa
Signing time: Sat 09 Nov 2024 07:59:01 +0000
ROA not before: Sat 09 Nov 2024 07:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215703
IP address blocks: 31.56.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:ef:00:97:ae:93:bb:94:69:07:73:a7:45:e1:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 07:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2be9396edc9599310624c16035815e609364a4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:f4:d2:27:46:7d:16:07:2a:e3:90:82:d6:
63:84:26:22:28:4c:49:ab:92:bd:e7:df:0a:07:b5:
7f:c7:1f:7d:52:a7:65:ab:ea:2f:62:3a:f9:df:e5:
ff:57:6f:80:5a:92:05:ac:c0:fb:7a:7f:d9:a6:3b:
01:ce:9d:3c:a4:74:19:a0:e1:ef:52:d2:97:c0:40:
60:b4:45:9d:fa:b0:c2:14:e5:d7:81:ae:1a:d9:7d:
da:51:4f:e6:45:fc:a3:ce:af:c1:19:e3:71:c8:d1:
93:54:1e:7a:9d:74:d1:ee:cf:cd:9b:e3:66:84:29:
8c:08:ae:a1:78:fa:34:3f:80:5d:e4:84:a8:ef:89:
29:19:a7:1e:da:c6:dc:62:a0:33:c8:cf:20:dd:8e:
73:7f:e2:b4:7d:52:3f:a4:ec:64:b3:3e:b3:26:92:
4e:c1:d2:dd:2c:1f:c0:e8:cc:a3:3b:67:de:53:d5:
e3:40:87:0c:c1:4d:49:47:81:11:cc:8d:f3:77:f8:
7e:2b:cb:39:53:5b:b3:68:a9:d3:e4:43:c1:e0:c6:
1d:e1:68:2a:5d:a2:60:82:11:3c:28:77:09:4b:28:
25:ba:f3:69:fb:70:3f:82:a9:b1:ea:a7:8f:f2:4d:
3c:5f:6a:6b:b0:25:b4:6f:8d:b3:f5:71:01:ba:0b:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:39:6E:DC:95:99:31:06:24:C1:60:35:81:5E:60:93:64:A4:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-k5btyVmTEGJMFgNYFeYJNkpOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:65:63:4e:75:82:e1:b4:a5:fe:55:f6:4c:52:11:f1:3f:12:
d5:a1:c4:22:98:5d:dc:45:f8:88:72:12:f3:77:d1:ad:62:8e:
00:e6:4a:75:b8:11:48:58:59:c0:1d:f6:e3:8d:9f:50:98:06:
64:aa:b9:1a:e1:67:69:9b:67:39:c7:d5:66:d8:d3:c0:7b:f2:
b8:67:34:6c:10:33:a1:c1:33:ed:8f:46:27:15:db:92:59:3a:
10:d0:0a:67:3e:bc:1d:b9:a6:dd:f9:f1:37:af:73:bd:5e:93:
85:f3:db:42:5f:46:48:61:a6:6f:e4:3d:83:f4:a0:30:24:ae:
61:31:34:60:46:6a:14:4b:d7:0e:a9:9f:76:9c:83:51:60:da:
50:ab:2e:29:36:3f:25:5e:10:51:9e:99:b7:57:ab:c5:87:20:
1e:ef:a4:b4:ee:06:fb:78:d7:22:5b:08:20:fe:c0:e1:3b:aa:
1b:ac:0e:33:3c:61:ba:dd:60:89:a7:4d:82:91:3e:ac:8c:ae:
18:91:75:16:4a:e6:a1:07:38:e0:da:58:fe:dd:79:a9:9d:f4:
0b:55:cb:bd:57:29:68:97:1e:94:9b:8a:9b:54:a3:2b:68:0b:
19:d1:ae:2e:a2:13:dd:91:3a:27:93:00:2f:4e:c2:67:ae:65:
c5:fb:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 17:26:27 2024 by rpki-client on console-ams.rpki-client.org